Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
File: JHvwudcpiha5hv1pVPCkRfLiEDw.cer (raw, json)
Hash identifier: y26UHvEy1ymCCpBEocd6WX8IbA68G1hki+CHqvM9qJw=
Subject key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C1348EA13F24B86898397B0182844F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:19:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207748
IP: 2001:67c:2f68::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:48:ea:13:f2:4b:86:89:83:97:b0:18:28:44:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:19:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:81:b2:36:9c:42:7e:5c:77:1d:3b:07:8c:
a2:a4:c7:e9:83:80:d4:57:b4:5c:b9:5b:3d:09:8e:
88:4a:e4:14:1c:a3:19:df:7a:e1:05:5d:62:94:ac:
8d:38:0a:a9:ca:71:f3:ef:b3:ef:d4:6e:80:40:73:
b1:59:c3:af:18:92:ec:9d:ee:03:e3:82:dc:83:d0:
e2:6f:26:27:d5:55:e1:c3:6f:5c:ef:e4:36:78:c8:
61:06:b9:58:7c:d9:73:9c:06:4d:67:55:c2:78:7d:
26:4d:6d:0d:be:84:86:ff:8a:65:25:2d:ed:a5:45:
d5:50:b4:7c:31:39:f8:f2:5b:4c:55:07:a7:22:c8:
91:69:df:05:a3:c9:87:17:aa:6c:3a:23:8b:91:db:
ab:27:88:da:30:0f:ef:33:03:43:f4:47:b9:4e:12:
40:ef:69:44:0f:84:4b:f3:2c:51:5f:8d:db:68:ae:
1f:77:fd:f8:b0:69:3b:d1:4f:4a:2a:62:79:90:21:
8c:df:42:75:b7:8d:06:57:98:78:bf:70:49:ce:64:
74:b5:74:4d:d4:3e:3e:4a:6d:5f:8e:6d:89:00:bb:
95:b5:2d:96:6e:96:75:50:f8:50:16:96:c7:82:63:
1a:d9:ed:2a:e3:9c:15:7c:c9:f0:68:dc:10:18:bf:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f68::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207748
Signature Algorithm: sha256WithRSAEncryption
a1:60:2d:f4:91:78:cd:b0:96:dc:bb:0a:90:c6:09:eb:87:2e:
1d:69:83:9e:39:16:eb:cc:90:ca:10:3b:26:91:2c:00:b6:c4:
b1:00:b5:4a:f9:5e:78:88:ab:40:47:0d:97:7f:5b:24:08:24:
28:c7:74:a1:2c:c0:3b:86:26:fd:dc:e6:e0:59:cb:c5:b0:a0:
73:a4:30:d1:76:b0:17:16:91:0f:8e:0f:19:45:45:e4:da:2d:
82:81:79:d8:32:e5:17:21:77:74:ad:4a:97:d3:c4:0e:1c:90:
86:e8:17:bc:9a:57:75:f5:35:2b:0d:75:e2:c5:cd:f4:65:16:
76:38:88:a3:12:db:79:c3:bc:fb:b4:c0:08:ef:15:0f:b0:6c:
a8:dd:c4:ad:38:20:94:ce:85:9c:fc:5c:70:de:44:14:e7:b1:
b1:3e:ea:f4:11:b8:1f:2f:a2:f6:ea:1c:45:d9:5d:ed:48:87:
4c:af:8c:ae:55:01:b1:72:ca:82:a2:39:84:36:6f:25:0f:5f:
66:be:c5:ca:a7:05:13:aa:9f:8b:8c:f5:76:4a:0d:84:73:81:
e2:08:9c:c5:bc:26:a5:05:65:b7:f3:f2:f9:95:1e:da:b1:97:
91:b9:f4:47:cf:e6:06:8f:3d:c6:f6:5c:88:d4:0c:a6:05:eb:
a5:dc:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:32:27 2026 by rpki-client